CVE-2016-2922

Published: Aug 13, 2018Modified: Nov 21, 2024

5.9

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

IBM Rational ClearQuest 8.0 through 8.0.1.9 and 9.0 through 9.0.1.3 (CQ OSLC linkages, EmailRelay) fails to check the SSL certificate against the requested hostname. It is subject to a man-in-the-middle attack with an impersonating server observing all the data transmitted to the real server. IBM X-Force ID: 113353.

Affected (4)

Products: Ibm: Rational Clearquest

Ibm

1 product

Rational Clearquest

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Rational Clearquest	From 8.0.0.0 to 8.0.0.21
Ibm Rational Clearquest	From 8.0.1.0 to 8.0.1.17
Ibm Rational Clearquest	From 9.0.0.0 to 9.0.0.6
Ibm Rational Clearquest	From 9.0.1.0 to 9.0.1.3